{"id":"CVE-2026-105780","published":"2026-10-27T17:16:56.313","lastModified":"2026-10-27T17:16:56.313","description":"Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.","cvssScore":9.9,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-863"],"vendors":[],"products":[],"references":[{"url":"https://www.adobe.com/trust/security/products/campaign/apsb26-162.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Adobe Campaign Classic has an Incorrect Authorization (CWE-863) flaw allowing low-privileged users to execute arbitrary code without user interaction by bypassing intended access controls.","exploitability":"Exploitation requires only low privileges and no user interaction, but no public exploit code is available yet.","blast_radius":"Successful exploitation could lead to full system compromise including data theft, modification, and service disruption within the Adobe Campaign Classic environment.","remediation":"Upgrade to Adobe Campaign Classic version 2.590 or later, as this is the fixed version addressing CVE-2026-105780.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","rce","web","enterprise-app"],"model":"garnet-coder","analyzedAt":"2026-10-28T09:57:33.951Z"}}